Mandriva Linux Security Advisory 2015-007

Mandriva Linux Security Advisory 2015-007 – Michal Zalewski reported an out-of-bounds memory access vulnerability in unrtf. Processing a malformed RTF file could lead to a segfault while accessing a pointer that may be under the attacker’s control. This would lead to a denial of service or, potentially, the execution of arbitrary code. Hanno Bck also reported a number of other crashes in unrtf.

Leave a Reply